Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78C87A3EF62311EF8CB25643762E951A.roa
File: 78C87A3EF62311EF8CB25643762E951A.roa (raw, json)
Hash identifier: vKMJf5fc43UBRIcwaS9Fa3q9bXOKfOjRh6LI//qH7t8=
Subject key identifier: F8:D1:EC:F2:7F:2A:A1:AA:02:0A:BE:13:7F:4E:89:93:E1:19:9A:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 016C91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78C87A3EF62311EF8CB25643762E951A.roa
Signing time: Fri 28 Feb 2025 22:29:28 +0000
ROA not before: Fri 28 Feb 2025 22:29:25 +0000
ROA not after: Wed 26 Mar 2025 22:29:25 +0000
asID: 62240
IP address blocks: 154.196.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93329 (0x16c91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Feb 28 22:29:25 2025 GMT
Not After : Mar 26 22:29:25 2025 GMT
Subject: CN=67c238c8-b17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ce:91:23:1b:b2:73:5c:79:e2:44:b8:d2:5d:
65:57:b0:51:61:5c:c5:03:70:70:17:90:f4:22:8f:
80:11:cd:92:af:a8:5c:d4:9b:05:cc:c4:b2:4f:01:
0c:14:05:3f:a0:d3:65:9a:2e:f2:4d:00:c0:7d:aa:
eb:76:de:f5:fe:10:f4:08:50:d4:64:29:b1:82:d1:
f7:04:04:ab:e8:22:67:01:9e:fa:b5:e0:76:2b:5a:
84:8c:cb:45:24:7d:b4:91:e8:ca:86:19:c7:b4:80:
6f:f2:00:73:21:67:7e:e5:16:01:75:36:4d:56:4c:
19:07:1c:f6:af:d9:8a:ca:70:70:29:c3:08:85:c1:
82:87:d3:ce:fd:1f:e9:9e:a8:7b:c8:00:20:25:6f:
b6:68:6b:41:f7:39:30:55:c7:8d:46:71:25:e0:e7:
13:79:2a:fd:94:0c:75:60:5d:ca:b6:2a:70:f5:14:
01:7c:d5:80:8b:57:d5:a7:57:71:f6:9d:82:5f:6a:
91:d9:ad:05:22:8d:80:fc:98:41:3d:8c:48:9d:ca:
31:45:fa:b1:cc:84:da:9f:f3:c1:31:82:1a:9c:b6:
a2:c7:4f:60:f0:5f:d6:16:59:98:0a:81:92:90:94:
a1:0a:7b:8d:fb:4d:a4:f7:d2:46:a2:7f:aa:f4:77:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D1:EC:F2:7F:2A:A1:AA:02:0A:BE:13:7F:4E:89:93:E1:19:9A:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78C87A3EF62311EF8CB25643762E951A.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:9d:0a:b8:dd:49:c9:05:31:3e:f9:84:9b:83:38:f1:ca:5e:
77:60:40:7e:58:3f:26:85:66:bc:ea:2b:28:a0:bd:19:be:de:
bf:06:46:6b:e7:13:fa:8b:39:62:bc:ad:8b:f3:b9:3f:16:8e:
2d:cb:32:3b:83:80:cc:77:48:6f:39:de:5e:1d:e7:2e:8c:0d:
7d:29:84:bd:74:a4:d7:55:63:4d:e5:b3:0d:85:71:e2:84:bb:
2c:0b:38:bb:87:7d:68:45:bb:a3:4b:86:7a:be:2d:b9:b1:79:
c6:ad:a7:91:d1:fc:81:8c:2b:67:4f:24:5d:0a:10:7f:c3:56:
2f:5d:22:8f:34:8e:df:2b:c3:78:4c:73:3e:d0:27:54:c8:d8:
61:6e:c2:0e:aa:df:46:73:c9:81:c9:6c:cf:ed:da:a6:68:82:
2b:fb:a1:f0:59:51:fc:f7:47:a4:7f:3a:8a:73:fe:fc:ed:19:
48:d8:0f:d1:5a:e6:ba:ce:09:f0:56:9e:27:71:a3:aa:c2:49:
fd:91:61:2f:52:02:cd:43:f6:04:90:9d:ef:c3:72:3b:1a:58:
94:b2:43:ff:b6:d3:32:f2:fe:2a:cc:d7:ee:06:ea:4b:54:ae:
9f:4e:53:41:59:96:97:bd:2a:7c:d5:b1:0e:19:41:41:f0:5f:
13:2f:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:11:58 2025 by rpki-client